[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: Client side hook scripts [Was: Proposal for $Revision$ keyword amendment, "global" revnums, etc...]

From: Malcolm Rowe <malcolm-svn-dev_at_farside.org.uk>
Date: 2005-10-13 12:16:17 CEST

On Wed, Oct 12, 2005 at 09:38:13PM -0400, Greg Hudson wrote:
> Client-side hook scripts have bad security implications; they allow the
> server to tell the client to do anything at all, when the user was
> really only interested in letting the server feed it updates.

We could provide client-defined client-side hook scripts, allowing the
client to run a given command after an update in a particular working
copy, for example. No security risks then.

But that's easier to do using scripts that wrap calls to svn themselves,
in my opinion.

Regards,
Malcolm

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org
Received on Thu Oct 13 12:17:29 2005

This is an archived mail posted to the Subversion Dev mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.